GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sagemaker, grype, chainloop-cli-fips, crossplane-provider-aws-sqs, nfpm, flux-image-automation-controller-fips, trivy-operator-fips, kaf, crossplane-provider-aws-ecs, cloudbeat, cg, crossplane-provider-aws-osis, vault-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sagemaker, grype, chainloop-cli-fips, crossplane-provider-aws-sqs, nfpm, flux-image-automation-controller-fips, trivy-operator-fips, kaf, crossplane-provider-aws-ecs, cloudbeat, cg, crossplane-provider-aws-osis, vault-fips,...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, aws-s3-controller, kafka-proxy, configmap-reload, sftpgo-plugin-pubsub, promxy, kubernetes-ingress-defaultbackend, octo-sts, kubernetes-event-exporter, kube-state-metrics, crossplane-provider-aws-kinesis, sftpgo-plugin-auth, cass-operator,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, kubernetes-csi-external-attacher, kafka-proxy, grafana-rollout-operator, pulumi, azuredisk-csi, cloudflared, crossplane-provider-aws-cloudformation, cilium, kubernetes-csi-livenessprobe, sftpgo-plugin-pubsub, promxy, buildah, thanos,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, aws-s3-controller, kafka-proxy, configmap-reload, sftpgo-plugin-pubsub, promxy, kubernetes-ingress-defaultbackend, octo-sts, kubernetes-event-exporter, kube-state-metrics, crossplane-provider-aws-kinesis, sftpgo-plugin-auth, cass-operator,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: spire-controller-manager, aws-s3-controller, kafka-proxy, configmap-reload, sftpgo-plugin-pubsub, promxy, kubernetes-ingress-defaultbackend, octo-sts, kubernetes-event-exporter, kube-state-metrics, crossplane-provider-aws-kinesis, sftpgo-plugin-auth, cass-operator,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: spire-controller-manager, kubernetes-csi-external-attacher, kafka-proxy, grafana-rollout-operator, pulumi, azuredisk-csi, cloudflared, crossplane-provider-aws-cloudformation, cilium, kubernetes-csi-livenessprobe, sftpgo-plugin-pubsub, promxy, buildah, thanos,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: eks-distro, opentelemetry-collector-contrib-fips, k8s-metacollector, kube-oidc-proxy, crossplane-provider-aws-sqs, kuberay-operator-fips, openfga, amazon-cloudwatch-agent-operator-fips, cadvisor-fips, regclient-fips, knative-operator-fips, spegel-fips, nfpm,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: eks-distro, opentelemetry-collector-contrib-fips, k8s-metacollector, kube-oidc-proxy, crossplane-provider-aws-sqs, kuberay-operator-fips, openfga, amazon-cloudwatch-agent-operator-fips, cadvisor-fips, regclient-fips, knative-operator-fips, spegel-fips, nfpm,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: eks-distro, opentelemetry-collector-contrib-fips, k8s-metacollector, kube-oidc-proxy, crossplane-provider-aws-sqs, openfga, amazon-cloudwatch-agent-operator-fips, cadvisor-fips, knative-operator-fips, spegel-fips, cass-operator-fips, longhorn-share-manager-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, aws-s3-controller, kafka-proxy, configmap-reload, sftpgo-plugin-pubsub, promxy, kubernetes-ingress-defaultbackend, octo-sts, kubernetes-event-exporter, dgraph, kube-state-metrics, crossplane-provider-aws-kinesis, falco-exporter,...